Application virus detection method, storage medium and terminal

Abstract

The embodiment of the invention provides an application virus detection method, a storage medium and a terminal, and the method comprises the steps: obtaining a terminal identity information set and a target application information set through terminal identity information and application information sets sent by one or more mobile terminals; a target application information set is matched with an application virus detection result table pre-stored in a cloud end to determine a to-be-detected application information set, and application information in the to-be-detected application information set is sent to one or more mobile terminals based on a preset distribution strategy and a terminal identity information set. And sending the application information to one or more mobile terminals, so that the one or more mobile terminals perform virus detection on applications corresponding to the application information, receive application virus detection results and send the application virus detection results to the one or more mobile terminals. By applying the method, a large number of applications can be distributed to different terminals for virus detection according to the preset distribution strategy, and by utilizing a distributed calculation and data sharing mechanism, the terminal performance consumption is reduced, and the application virus detection efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the field of application virus detection, and in particular to an application virus detection method, a storage medium and a terminal. Background Art

[0002] With the development of computer technology, virus detection has become one of the important means to ensure network security. The traditional virus detection method mainly uses the local virus detection engine to parse and scan each application in the device to determine whether there is a virus. This method can effectively prevent the spread and attack of viruses to a certain extent. However, with the popularization of the Internet and the explosive growth of data volume, the traditional virus detection method can no longer meet the needs of modern network security.

[0003] As the number of applications grows, parsing and scanning each application on the terminal device will consume a lot of computing resources and time of the terminal device. Secondly, most applications are distributed through the application market. There are generally a large number of identical applications on different terminal devices, so these applications will be scanned repeatedly. In theory, the scanning result of each sample is unique. Repeated scanning will cause a waste of terminal device resources and low scanning efficiency. Summary of the invention

[0004] The embodiments of the present invention provide an application virus detection method, a storage medium and a terminal. Based on the cloud, a large number of applications are distributed to different terminals according to a preset distribution strategy for virus detection. The idea of ​​distributed computing is used to reduce the number of applications that need to be detected on each terminal, reduce terminal performance consumption, and improve application virus detection efficiency.

[0005] In a first aspect, an embodiment of the present invention provides an application virus detection method, comprising:

[0006] According to the terminal identity information and application information set sent by one or more mobile terminals, a terminal identity information set and a target application information set are obtained; the terminal identity information includes a unique identifier of the mobile terminal; the target application information set includes application information of one or more applications, and the application information includes a unique identifier of each application;

[0007] Match each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and determine the application information set to be detected according to the matching result; the application virus detection result table includes application information and virus detection results of one or more applications;

[0008] Based on a preset allocation strategy and a terminal identity information set, the application information in the to-be-detected application information set is sent to the one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information;

[0009] Receive one or more application virus detection results sent by the one or more mobile terminals, and send the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0010] In a second aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the method steps described in the first aspect are implemented.

[0011] In a third aspect, an embodiment of the present invention provides a terminal, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method steps described in the first aspect when executing the computer program.

[0012] The application virus detection method, storage medium and terminal provided by the embodiments of the present invention have the following technical effects:

[0013] The embodiment of the present invention obtains a terminal identity information set and a target application information set through terminal identity information and application information sets sent by one or more mobile terminals; determines the application information set to be detected by matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and sends the application information in the application information set to be detected to one or more mobile terminals based on a preset allocation strategy and the terminal identity information set, so that one or more mobile terminals can perform virus detection on the application corresponding to the application information, and receive the virus detection results of the application and send them to the above one or more mobile terminals. By using the above method, a large number of applications can be distributed to different terminals for virus detection based on the cloud according to the preset allocation strategy, and the distributed computing and data sharing mechanism can be used to reduce the number of applications that need to be detected on each terminal, reduce terminal performance consumption, and improve the efficiency of application virus detection. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0015] Figure 1A flow chart of an application virus detection method provided by an embodiment of the present invention;

[0016] Figure 2 A schematic diagram of the structure of a virus detection device provided by an embodiment of the present invention;

[0017] Figure 3 A block diagram of a terminal provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are only examples of devices and methods consistent with some aspects of the present invention as detailed in the attached claims.

[0020] In the description of the present invention, it should be understood that the terms "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0021] With the development of computer technology, virus detection has become one of the important means to ensure network security. The traditional virus detection method is mainly to parse and scan each application in the device through the local virus detection engine to determine whether there is a virus. This method can effectively prevent the spread and attack of viruses to a certain extent. However, with the increase in the number of applications, parsing and scanning each application on the terminal device will consume a lot of computing resources and time of the terminal device. Secondly, most applications are distributed through the application market. There are generally a large number of identical applications on different terminal devices, so these applications will be scanned repeatedly. In theory, the scanning result of each sample is unique. Repeated scanning will cause the waste of terminal device resources and low scanning efficiency.

[0022] In view of the above problems, the present invention provides an application virus detection method, a storage medium and a terminal. In the following, each step of the application virus detection method in the embodiment of the present invention will be described in more detail in conjunction with the accompanying drawings and embodiments.

[0023] Figure 1 A flow chart of a virus detection method provided by an embodiment of the present invention. Figure 1 As shown, the method of the embodiment of the present invention may include the following steps:

[0024] S101, obtaining a terminal identity information set and a target application information set according to terminal identity information and application information sets sent by one or more mobile terminals; the terminal identity information includes a unique identifier of the mobile terminal; the target application information set includes application information of one or more applications, and the application information includes a unique identifier of each application.

[0025] In the embodiment of the present invention, when it is necessary to perform virus detection on applications on multiple mobile terminals, if each mobile terminal is allowed to use a local engine for scanning and detection, a large amount of computing resources and time of each mobile terminal will be consumed, and repeated scanning will occur, resulting in resource waste and low efficiency. In view of this situation, based on the characteristics of the cloud, the cloud can receive requests from multiple mobile terminals and implement a dynamic allocation strategy.

[0026] When a mobile terminal needs to perform virus detection on some installed applications, the application information of each application to be detected on the mobile terminal can be extracted first. Since a mobile terminal may include multiple applications to be detected, the application information should include a unique identifier of each application to be detected, such as the MD5 information of the application or the combination of the package name of the application and the MD5 information. In order to more clearly display the characteristics of the application, the application program name, version number, certificate and other information may also be included. After extracting the application information of all applications to be detected on the mobile terminal, all application information can be combined into an application information set.

[0027] When multiple mobile terminals send requests to the cloud, in order to enable the cloud to distinguish each mobile terminal, the mobile terminal can also extract the corresponding terminal identity information, and can uniquely identify each mobile terminal, such as a unique identifier generated based on mobile terminal information and user account information. Then, the mobile terminal can form a request with the corresponding terminal identity information and application information set and send it to the cloud.

[0028] After the cloud receives the terminal identity information and application information set sent by one or more mobile terminals, the terminal identity information set and the target application information set can be obtained according to the terminal identity information and application information set sent by one or more mobile terminals. Specifically, it includes:

[0029] S101.1, obtaining terminal identity information and application information sets sent by one or more mobile terminals within a preset time; or obtaining terminal identity information and application information sets sent by a predetermined number of mobile terminals; the application information set includes application information of the application to be detected on the mobile terminal;

[0030] S101.2, combining the terminal identity information of each mobile terminal into a terminal identity information set;

[0031] S101.3, compare the application information sets of each mobile terminal, filter out duplicate application information, and obtain a target application information set.

[0032] Optionally, since the cloud may continuously receive scan requests from mobile terminals, if a corresponding scan is performed every time a scan request from a mobile terminal is received, not only will the advantages of the cloud not be brought into play, but frequent scans will also be required. If too many scan requests from mobile terminals are received at one time, a large number of applications need to be batch scanned, which will take a long time. Therefore, certain measures can be taken according to the situation to enable the cloud to scan an appropriate number of applications at a time.

[0033] Optionally, a time interval can be set in the cloud, such as a few seconds to tens of seconds, which can be dynamically set according to the actual interface concurrency situation, and the terminal identity information and application information sets sent by one or more mobile terminals received in the same time interval are grouped together for batch scanning. Alternatively, the terminal identity information and application information sets sent by a predetermined number of mobile terminals are obtained, such as when the cloud receives the terminal identity information and application information sets sent by 100 mobile terminals, the terminal identity information and application information sets sent by these 100 mobile terminals are grouped together for batch scanning, and the predetermined number can be set according to the actual situation.

[0034] Optionally, after receiving the terminal identity information and application information set sent by one or more mobile terminals, the terminal identity information of each mobile terminal is combined into a terminal identity information set. As can be seen from the above, the application information set of each mobile terminal includes the application information of the application to be detected on the mobile terminal. Since an application may be installed on multiple mobile terminals, there may be multiple duplicate application information in the application information set sent by one or more mobile terminals. If the duplicate application information is not removed, repeated scanning will result. Therefore, it is necessary to compare the application information set of each mobile terminal, filter out the duplicate application information, and obtain the target application information set.

[0035] Based on any of the above optional embodiments, S102, each application information in the target application information set is matched with an application virus detection result table pre-stored in the cloud, and an application information set to be detected is determined according to the matching result; the application virus detection result table includes application information and virus detection results of one or more applications.

[0036] When the cloud receives the application virus detection request from the mobile terminal and assigns the virus detection task to the mobile terminal according to the request, the mobile terminal will send the virus detection result to the cloud after completing the detection task. Therefore, the application information and the corresponding virus scanning result can be pre-stored in the cloud, so that the next time the application virus detection request from the mobile terminal is received, if there is the same application information, the corresponding virus detection result can be directly called without repeated detection. That is, the application information after each scan and the virus scanning result corresponding to the application information are saved as an application virus detection result table.

[0037] Therefore, after determining the terminal identity information set and the target application information set, each application information in the target application information set can be matched with the application virus detection result table pre-stored in the cloud, and the application information set to be detected can be determined based on the matching results. Among them, the application virus detection result table includes application information and virus detection results of one or more applications. Specifically including:

[0038] S102.1, matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and saving the application information that has not been successfully matched as the application information set to be detected.

[0039] Optionally, each application information in the target application information set is matched with the application virus detection result table pre-stored in the cloud. The application virus detection result table includes application information and virus detection results of one or more applications. If the application information in the target application information set is the same as any application information in the application virus detection result table, the match is successful, indicating that the application corresponding to the application information already has a corresponding virus detection result, and there is no need to perform virus detection on the application corresponding to the application information. Therefore, only the application information that has not been successfully matched needs to be saved as the application information set to be detected. For the application information that has been successfully matched, the application virus detection result corresponding to each application information can be obtained from the application virus detection result table without further scanning.

[0040] Based on any of the above optional embodiments, S103, based on a preset allocation strategy and a terminal identity information set, the application information in the application information set to be detected is distributed and sent to the one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information.

[0041] In an embodiment of the present invention, after determining the application information set to be detected, if each mobile terminal is required to perform virus detection on the applications corresponding to all the application information in the application information set to be detected, it will consume a lot of resources and time. A distributed thinking can be adopted to distribute all the application information in the application information set to be detected to multiple mobile terminals, so that each mobile terminal can perform virus detection on the application corresponding to the application information assigned to it.

[0042] Optionally, based on a preset allocation strategy and a terminal identity information set, the application information in the application information set to be detected is distributed and sent to the one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information. Specifically including:

[0043] S103.1, determining that each application information in the to-be-detected application information set corresponds to one or more terminal identity information in the terminal identity information set;

[0044] S103.2, sending each application information to a mobile terminal corresponding to any corresponding terminal identity information.

[0045] Optionally, when a mobile terminal performs virus detection on an application, the application must be installed on the mobile terminal. Therefore, when the application information in the application information set to be detected is distributed and sent to one or more mobile terminals corresponding to the terminal identity information in the terminal identity information set, the application information should be distributed to the mobile terminal on which the application corresponding to the application information is installed.

[0046] Optionally, in the foregoing, when the terminal identity information set and the target application information set are obtained based on the terminal identity information and the application information set sent by one or more mobile terminals, the application information set corresponding to each terminal identity information can be determined, and therefore, the terminal identity information corresponding to each application information in the application information set can also be determined conversely. The application information set to be detected is composed of the application information in the target application information set, and the target application information set is composed of the application information in one or more application information sets. At the same time, since an application may be installed on multiple mobile terminals, it can be determined that each application information in the application information set to be detected corresponds to one or more terminal identity information in the terminal identity information set.

[0047] If an application is installed on only one mobile terminal, then the application information of the application corresponds to only one terminal identity information, and the application information can be sent to the mobile terminal corresponding to the terminal identity information. If an application is installed on multiple mobile terminals, then the application information of the application corresponds to multiple terminal identity information, and the application information can be sent to the mobile terminal corresponding to any corresponding terminal identity information.

[0048] Optionally, if one mobile terminal receives a small amount of application information and another mobile terminal receives a large amount of application information, it will also cause a waste of mobile terminal resources and time consumption, so the amount of application information received by each mobile terminal should be kept consistent as much as possible. For example, there are mobile terminal A and mobile terminal B, and applications a, b, c, and d, where mobile terminal A has applications a, b, and c installed, and mobile terminal B has applications b, c, and d installed. Then, the application information of application a can be sent to mobile terminal A, the application information of application d can be sent to mobile terminal B, and the application information of application b and application c can be sent to mobile terminal A and mobile terminal B, respectively.

[0049] Based on any of the above optional embodiments, S104, receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0050] Optionally, the application information in the application information set to be detected is distributed and sent to one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information. After each mobile terminal completes the virus detection, it will report the virus detection result to the cloud, so the cloud will receive one or more application virus detection results sent by one or more mobile terminals.

[0051] When the application information in the application information set to be detected is distributed and sent to one or more mobile terminals, each mobile terminal only receives part of the application information and only performs virus detection on the application corresponding to the part of the application information. It is possible that all the applications to be detected installed on the mobile terminal are not tested for viruses, and no complete application virus detection results are obtained. Therefore, after the cloud receives all application virus detection results, the application virus detection results should be fed back to each mobile terminal.

[0052] In an optional embodiment, one or more application virus detection results sent by the one or more mobile terminals are received, and the application virus detection results corresponding to each application information in the target application information set are sent to the mobile terminal corresponding to the terminal identity information in the terminal identity information set. Specifically, it includes:

[0053] S104.1, storing the target application information set with the application virus detection result table pre-stored in the cloud and the application information that successfully matches the application information and the virus detection results corresponding to the application information as a first application virus detection result table;

[0054] S104.2, updating the one or more application virus detection results to the first application virus detection result table;

[0055] S104.3, determining that each application information in the first application virus detection result table corresponds to one or more terminal identity information in the terminal identity information set;

[0056] S104.4, sending the application virus detection result corresponding to the application information to the mobile terminal corresponding to the corresponding one or more terminal identity information.

[0057] Optionally, as can be seen from the foregoing, when the application information in the target application information set is matched with the application virus detection result table pre-stored in the cloud, in addition to the application information that has not been successfully matched, there is also successfully matched application information, and the application virus detection result table contains the virus scanning results corresponding to the successfully matched application information. Therefore, the successfully matched application information and the virus detection results corresponding to the application information can be directly saved as the first application virus detection result table.

[0058] After receiving the application virus detection result corresponding to each application information in the to-be-detected application information set sent by one or more mobile terminals, the application virus detection result may be updated to the first application virus detection result table.

[0059] Then, as can be seen from the above, one or more terminal identity information in the terminal identity information set corresponding to each application information in the first application virus detection result table can be determined, and the application virus detection result corresponding to the application information is sent to the mobile terminal corresponding to the corresponding one or more terminal identity information.

[0060] In another optional embodiment, one or more application virus detection results sent by the one or more mobile terminals are received, and the application virus detection result corresponding to each application information in the target application information set is sent to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0061] After saving the successfully matched application information and the application virus detection results corresponding to the application information as the first application virus detection result table, the application virus detection results corresponding to each application information in the first application virus detection result table can be directly sent to the mobile terminal corresponding to the terminal identity information in the terminal identity information set without waiting for the application virus detection corresponding to each application information in the application information set to be completed.

[0062] Specifically, one or more terminal identity information in the terminal identity information set corresponding to each application information in the first application virus detection result table may be determined first, and then the application virus detection result corresponding to each application information is sent to the mobile terminal corresponding to the corresponding one or more mobile identity information.

[0063] When the application virus detection corresponding to each application information in the application information set to be detected is completed, the received one or more application virus detection results are saved as a second application virus detection result table, and one or more terminal identity information in the terminal identity information set corresponding to each application information in the second application virus detection result table is determined, and then the application virus detection result corresponding to each application information is sent to the mobile terminal corresponding to the corresponding one or more mobile identity information.

[0064] It should also be noted that after the application virus detection corresponding to each application information in the application information set to be detected is completed, each application information in the application information set to be detected and the application virus detection result corresponding to each application information can be saved to the application virus detection result table in the cloud for subsequent calls.

[0065] In summary, the embodiment of the present invention provides an application virus detection method, which obtains a terminal identity information set and a target application information set through terminal identity information and application information sets sent by one or more mobile terminals; determines the application information set to be detected by matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and distributes the application information in the application information set to be detected to one or more mobile terminals based on a preset allocation strategy and terminal identity information set, so that one or more mobile terminals can perform virus detection on the application corresponding to the application information, and receive the virus detection results of the application and send them to the above one or more mobile terminals. By applying the above method, a large number of applications can be distributed to different terminals for virus detection based on the cloud according to the preset allocation strategy, and distributed computing and data sharing mechanisms can be used to reduce the number of applications that need to be detected on each terminal, reduce terminal performance consumption, and improve application virus detection efficiency.

[0066] The following are embodiments of the device of the present invention, which can be used to implement the method embodiments of the present invention. For details not disclosed in the device embodiments of the present invention, please refer to the method embodiments of the present invention.

[0067] See also Figure 2 , is a structural diagram of a virus detection device provided in an embodiment of the present invention.

[0068] The application virus detection device 200 in the embodiment of the present invention includes: an information receiving module 201 , a to-be-detected application information set determination module 202 , an application information allocation module 203 and a detection result sending module 204 .

[0069] An information receiving module, configured to obtain a terminal identity information set and a target application information set according to terminal identity information and application information sets sent by one or more mobile terminals; the terminal identity information includes a unique identifier of the mobile terminal; the target application information set includes application information of one or more applications, and the application information includes a unique identifier of each application;

[0070] A module for determining a set of application information to be detected, used to match each application information in the target application information set with an application virus detection result table pre-stored in the cloud, and determine the set of application information to be detected according to the matching result; the application virus detection result table includes application information and virus detection results of one or more applications;

[0071] An application information distribution module, configured to distribute and send the application information in the application information set to be detected to the one or more mobile terminals based on a preset distribution strategy and a terminal identity information set, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information;

[0072] The detection result sending module is used to receive one or more application virus detection results sent by the one or more mobile terminals, and send the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0073] It should be noted that the application virus detection device provided in the above embodiment only uses the division of the above functional modules as an example when executing the application virus detection method. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the application virus detection device provided in the above embodiment belongs to the same concept as the application virus detection method embodiment. Therefore, for details not disclosed in the embodiment of the device of the present invention, please refer to the embodiment of the application virus detection method of the present invention, which will not be repeated here.

[0074] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0075] The embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the steps of the method of any of the above embodiments are implemented. The computer-readable storage medium may include, but is not limited to, any type of disk, including a floppy disk, an optical disk, a DVD, a CD-ROM, a micro drive, and a magneto-optical disk, a ROM, a RAM, an EPROM, an EEPROM, a DRAM, a VRAM, a flash memory device, a magnetic card or an optical card, a nanosystem (including a molecular memory IC), or any type of medium or device suitable for storing instructions and / or data.

[0076] An embodiment of the present invention further provides a terminal, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of any of the above-mentioned method embodiments when executing the program.

[0077] Figure 3 A block diagram of a terminal provided by an embodiment of the present invention. Figure 3 An embodiment of the present invention provides a terminal 300, including: a processor (processor) 301, a communication interface (Communications Interface) 302, a memory (memory) 303 and a communication bus 304, wherein the processor 301, the communication interface 302, and the memory 303 communicate with each other through the communication bus 304. The processor 301 can call the logic instructions in the memory 303 to execute the following method, including: obtaining a terminal identity information set and a target application information set according to the terminal identity information and application information set sent by one or more mobile terminals; the terminal identity information includes the unique identifier of the mobile terminal; the target application information set includes application information of one or more applications, and the application information includes the unique identifier of each application; matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and determining the application information set to be detected according to the matching result; the application virus detection result table includes application information and virus detection results of one or more applications; based on a preset allocation strategy and a terminal identity information set, sending the application information in the application information set to be detected to the one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information; receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0078] The terminal structure block diagram shown in the embodiment of the present invention does not constitute a limitation on the terminal 300. The terminal 300 may include more or fewer components than those shown in the figure, or combine certain components, or adopt a different component arrangement.

[0079] An embodiment of the present invention discloses a computer program product, the computer program product includes a computer program stored on a non-transitory computer-readable storage medium, the computer program includes program instructions, when the program instructions are executed by a computer, the computer can execute the methods provided by the above-mentioned method embodiments, for example, including: obtaining a terminal identity information set and a target application information set according to terminal identity information and an application information set sent by one or more mobile terminals; the terminal identity information includes a unique identifier of the mobile terminal; the target application information set includes application information of one or more applications, and the application information includes a unique identifier of each application; matching each application information in the target application information set with an application virus detection result table pre-stored in a cloud, and determining an application information set to be detected according to the matching result; the application virus detection result table includes application information and virus detection results of one or more applications; based on a preset allocation strategy and a terminal identity information set, sending the application information in the application information set to be detected to the one or more mobile terminals, so that the one or more mobile terminals perform virus detection on the application corresponding to the application information; receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

[0080] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. An application virus detection method, characterized in that: include: Obtaining a terminal identity information set and a target application information set according to terminal identity information and application information sets sent by one or more mobile terminals; The terminal identity information includes a unique identifier of the mobile terminal; The target application information set includes application information of one or more applications, and the application information includes a unique identifier of each application; Match each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and determine the application information set to be detected according to the matching result; The application virus detection result table includes application information and virus detection results of one or more applications; Based on a preset allocation strategy and a terminal identity information set, the application information in the to-be-detected application information set is sent to the one or more mobile terminals, so that the one or more mobile terminals can perform virus detection on the application corresponding to the application information; Receive one or more application virus detection results sent by the one or more mobile terminals, and send the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set.

2. The method according to claim 1, characterized in that: The obtaining of the terminal identity information set and the target application information set according to the terminal identity information and the application information set sent by one or more mobile terminals includes: Acquire terminal identity information and application information sets sent by one or more mobile terminals within a preset time; or acquire terminal identity information and application information sets sent by a predetermined number of mobile terminals; the application information set includes application information of the application to be detected on the mobile terminal; The terminal identity information of each mobile terminal is combined into a terminal identity information set; The application information sets of each mobile terminal are compared, duplicate application information is filtered out, and a target application information set is obtained.

3. The method according to claim 1 or 2, characterized in that: The step of matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud, and determining the application information set to be detected according to the matching result, includes: Each application information in the target application information set is matched with the application virus detection result table pre-stored in the cloud, and the application information that is not successfully matched is saved as the application information set to be detected.

4. The method according to any one of claims 1 to 5, characterized in that: The step of distributing and sending the application information in the to-be-detected application information set to the one or more mobile terminals based on a preset distribution strategy and a terminal identity information set includes: Determine that each piece of application information in the to-be-detected application information set corresponds to one or more pieces of terminal identity information in the terminal identity information set; Each piece of application information is sent to a mobile terminal corresponding to any corresponding terminal identity information.

5. The method according to claim 3 or 4, characterized in that: The receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set, includes: The target application information is concentrated and the application virus detection result table pre-stored in the cloud is matched successfully with the application information and the virus detection result corresponding to the application information is saved as a first application virus detection result table; receiving one or more application virus detection results sent by the one or more mobile terminals, and updating the one or more application virus detection results to the first application virus detection result table; Determine that each application information in the first application virus detection result table corresponds to one or more terminal identity information in the terminal identity information set; The application virus detection result corresponding to the application information is sent to the mobile terminal corresponding to the corresponding one or more terminal identity information.

6. The method according to claim 4, characterized in that: After matching each application information in the target application information set with the application virus detection result table pre-stored in the cloud and saving the unmatched application information as the application information set to be detected, the method further includes: The successfully matched application information and the virus detection results corresponding to the application information are saved as a first application virus detection result table; Determine that each application information in the first application virus detection result table corresponds to one or more terminal identity information in the terminal identity information set; The application virus detection result corresponding to each application information is sent to the mobile terminal corresponding to the corresponding one or more mobile identity information.

7. The method according to claim 6, characterized in that: The receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set, includes: receiving one or more application virus detection results sent by the one or more mobile terminals, and saving the one or more application virus detection results as a second application virus detection result table; Determine that each application information in the second application virus detection result table corresponds to one or more terminal identity information in the terminal identity information set; The application virus detection result corresponding to each application information is sent to the mobile terminal corresponding to the corresponding one or more mobile identity information.

8. The method according to any one of claims 1 to 7, characterized in that: After receiving one or more application virus detection results sent by the one or more mobile terminals, and sending the application virus detection result corresponding to each application information in the target application information set to the mobile terminal corresponding to the terminal identity information in the terminal identity information set, the method further includes: Each piece of application information in the to-be-detected application information set and the application virus detection result corresponding to each piece of application information are saved in the application virus detection result table.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

10. A terminal comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 8 is implemented.

Images